Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa
File: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (raw, json)
Hash identifier: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=
Subject key identifier: CA:DC:1D:A4:DD:BF:32:62:33:FA:E8:C0:1A:47:8E:4B:2C:45:9D:04
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F87209A6D4FAE5ED9C8A8B4FBF367
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 109.107.181.0/24 maxlen: 24
109.107.189.0/24 maxlen: 24
109.107.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:87:20:9a:6d:4f:ae:5e:d9:c8:a8:b4:fb:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cadc1da4ddbf326233fae8c01a478e4b2c459d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:cd:1f:a0:f7:f1:cb:e5:aa:af:09:ce:6f:
a6:f4:d6:96:b8:58:e4:1c:84:16:79:a7:bf:c8:3e:
95:5a:84:05:10:78:06:97:cd:7b:2f:09:5d:ff:ca:
5e:96:52:d6:9e:f4:6a:11:e5:db:77:13:70:66:6d:
90:70:1c:f5:40:2c:29:23:63:7e:44:31:f1:ab:62:
f8:81:9b:34:8f:2c:ee:06:0e:89:e4:43:a0:09:1f:
f8:fb:95:95:29:ec:eb:55:d6:46:ed:a8:1e:f3:0c:
db:13:ab:9a:9d:1e:65:c1:b3:0c:a5:30:1e:d2:07:
dd:cd:5e:14:f4:74:85:a8:4d:fc:39:6c:b0:30:d2:
13:c5:ba:8b:20:18:ae:c3:ab:f5:5a:0e:b7:83:85:
56:3a:86:c3:7b:c7:cf:fd:2d:88:ec:74:a4:9b:02:
2b:0d:57:9d:26:01:f9:d0:8a:fe:10:f1:c8:78:dd:
3f:36:74:6c:a6:c5:10:28:37:e2:a3:01:c0:5c:e7:
fd:ca:97:6c:25:43:6b:59:04:2f:7a:b0:50:04:f6:
09:fd:4d:cb:75:f2:c9:6b:3a:bd:69:17:e5:03:21:
ea:63:5c:98:e2:eb:c4:37:b4:a6:cb:3f:f5:fd:37:
90:76:48:a6:2a:83:ea:3c:3c:0c:fa:d0:5f:66:08:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:1D:A4:DD:BF:32:62:33:FA:E8:C0:1A:47:8E:4B:2C:45:9D:04
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.181.0/24
109.107.189.0-109.107.190.255
Signature Algorithm: sha256WithRSAEncryption
30:cb:b9:3e:91:de:88:c0:d0:10:f3:86:98:37:ae:4c:7e:66:
8d:9b:75:58:f0:74:87:0b:29:9e:e4:76:14:18:08:80:48:85:
2e:f9:43:d2:51:09:d9:28:8d:35:a9:40:a2:0f:4a:8a:3c:27:
64:4c:10:fb:c8:fe:80:1b:4b:f8:db:33:41:da:6c:4f:bc:b9:
11:51:8b:dd:a6:86:30:3e:e6:9e:10:22:71:3a:6e:d3:01:03:
ff:47:9e:fb:3d:fe:78:90:59:c0:55:95:8e:aa:4b:c1:90:9c:
93:51:63:51:b6:b5:10:b7:64:f4:86:c9:82:23:a1:ef:83:80:
80:10:cf:cf:e7:1d:cc:e0:16:b2:22:79:5a:b0:22:c6:9b:21:
5d:60:6c:0f:0b:5e:14:80:cb:ea:ca:47:7d:ad:cf:e0:3c:33:
55:ed:07:83:82:2b:f6:0e:34:b8:70:ba:eb:df:13:fe:19:a0:
0c:02:50:a6:76:96:01:9b:4e:0b:ca:3a:58:3e:b6:4a:80:cd:
27:bf:d0:0d:84:c9:99:37:b3:1c:42:00:61:d2:08:58:00:13:
61:c1:3b:96:94:97:df:93:35:ab:70:c6:d7:ee:f4:9e:6b:af:
ba:e8:6c:a4:af:2f:5b:5e:e9:76:5c:1e:09:3a:c0:bc:bd:22:
6b:28:02:9c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQiH4cgmm1Prl7ZyKi0+/NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4
ZmU0NTYwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWRjMWRhNGRkYmYzMjYyMzNmYWU4YzAxYTQ3OGU0YjJjNDU5ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiDNH6D38cvlqq8Jzm+m9NaWuFjk
HIQWeae/yD6VWoQFEHgGl817Lwld/8pellLWnvRqEeXbdxNwZm2QcBz1QCwpI2N+
RDHxq2L4gZs0jyzuBg6J5EOgCR/4+5WVKezrVdZG7age8wzbE6uanR5lwbMMpTAe
0gfdzV4U9HSFqE38OWywMNITxbqLIBiuw6v1Wg63g4VWOobDe8fP/S2I7HSkmwIr
DVedJgH50Ir+EPHIeN0/NnRspsUQKDfiowHAXOf9ypdsJUNrWQQverBQBPYJ/U3L
dfLJazq9aRflAyHqY1yY4uvEN7Smyz/1/TeQdkimKoPqPDwM+tBfZgiFLwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMrcHaTdvzJiM/rowBpHjkssRZ0EMB8GA1UdIwQY
MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt
ZGVlM2VkNDk3YWVlLzEveXR3ZHBOMl9NbUl6LXVqQUdrZU9TeXhGblFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl
LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAbWu1MAwD
BABta70DBABta74wDQYJKoZIhvcNAQELBQADggEBADDLuT6R3ojA0BDzhpg3rkx+
Zo2bdVjwdIcLKZ7kdhQYCIBIhS75Q9JRCdkojTWpQKIPSoo8J2RMEPvI/oAbS/jb
M0HabE+8uRFRi92mhjA+5p4QInE6btMBA/9Hnvs9/niQWcBVlY6qS8GQnJNRY1G2
tRC3ZPSGyYIjoe+DgIAQz8/nHczgFrIieVqwIsabIV1gbA8LXhSAy+rKR32tz+A8
M1XtB4OCK/YONLhwuuvfE/4ZoAwCUKZ2lgGbTgvKOlg+tkqAzSe/0A2EyZk3sxxC
AGHSCFgAE2HBO5aUl9+TNatwxtfu9J5rr7robKSvL1te6XZcHgk6wLy9ImsoApw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:22:04 2025 by rpki-client